1#@!#!123s

: / var / lib / leapp / el8userspace / lib / systemd /

Filename : purge-nobody-user

back

#!/bin/bash -eu

if [ $UID -ne 0 ]; then
    echo "WARNING: This script needs to run as root to be effective"
    exit 1
fi

export SYSTEMD_NSS_BYPASS_SYNTHETIC=1

if [ "${1:-}" = "--ignore-journal" ]; then
    shift
    ignore_journal=1
else
    ignore_journal=0
fi

echo "Checking processes..."
if ps h -u 99 | grep .; then
    echo "ERROR: ps reports processes with UID 99!"
    exit 2
fi
echo "... not found"

echo "Checking UTMP..."
if w -h 199 | grep . ; then
    echo "ERROR: w reports UID 99 as active!"
    exit 2
fi
if w -h nobody | grep . ; then
    echo "ERROR: w reports user nobody as active!"
    exit 2
fi
echo "... not found"

echo "Checking the journal..."
if [ "$ignore_journal" = 0 ] && journalctl -q -b -n10 _UID=99 | grep . ; then
    echo "ERROR: journalctl reports messages from UID 99 in current boot!"
    exit 2
fi
echo "... not found"

echo "Looking for files in /etc, /run, /tmp, and /var..."
if find /etc /run /tmp /var -uid 99 -print | grep -m 10 . ; then
    echo "ERROR: found files belonging to UID 99"
    exit 2
fi
echo "... not found"

echo "Checking if nobody is defined correctly..."
if getent passwd nobody |
	grep '^nobody:[x*]:65534:65534:.*:/:/sbin/nologin';
then
    echo "OK, nothing to do."
    exit 0
else
    echo "NOTICE: User nobody is not defined correctly"
fi

echo "Checking if nfsnobody or something else is using the uid..."
if getent passwd 65534 | grep . ; then
    echo "NOTICE: will have to remove this user"
else
    echo "... not found"
fi

if [ "${1:-}" = "-x" ]; then
    if getent passwd nobody >/dev/null; then
	# this will remove both the user and the group.
	( set -x
   	  userdel nobody
	)
    fi

    if getent passwd 65534 >/dev/null; then
	# Make sure the uid is unused. This should free gid too.
	name="$(getent passwd 65534 | cut -d: -f1)"
	( set -x
	  userdel "$name"
	)
    fi

    if grep -qE '^(passwd|group):.*\bsss\b' /etc/nsswitch.conf; then
	echo "Sleeping, so sss can catch up"
	sleep 3
    fi

    if getent group 65534; then
	# Make sure the gid is unused, even if uid wasn't.
	name="$(getent group 65534 | cut -d: -f1)"
	( set -x
	  groupdel "$name"
	)
    fi

    # systemd-sysusers uses the same gid and uid
    ( set -x
      systemd-sysusers --inline 'u nobody 65534 "Kernel Overflow User" / /sbin/nologin'
    )
else
    echo "Pass '-x' to perform changes"
fi

Name	Size	Last Modified	Owner	Permissions
boot	Dir	July 28 2023 2:45:48	root	0755
catalog	Dir	July 28 2023 2:45:47	root	0755
network	Dir	July 28 2023 2:45:48	root	0755
portable	Dir	July 28 2023 2:45:47	root	0755
system	Dir	July 28 2023 2:48:17	root	0755
system-generators	Dir	July 28 2023 2:48:16	root	0755
system-preset	Dir	July 28 2023 2:45:47	root	0755
system-shutdown	Dir	July 28 2023 2:48:17	root	0755
system-sleep	Dir	June 29 2023 8:29:12	root	0755
user	Dir	July 28 2023 2:45:52	root	0755
user-environment-generators	Dir	July 28 2023 2:45:48	root	0755
user-generators	Dir	June 29 2023 8:29:12	root	0755
user-preset	Dir	July 28 2023 2:45:48	root	0755
import-pubring.gpg	9.327 KB	June 22 2018 11:11:49	root	0644
libsystemd-shared-239.so	2.63 MB	June 29 2023 8:29:23	root	0755
portablectl	36.992 KB	June 29 2023 8:29:23	root	0755
purge-nobody-user	2.296 KB	June 29 2023 8:29:12	root	0755
resolv.conf	0.662 KB	June 22 2018 11:11:49	root	0644
systemd	1.53 MB	June 29 2023 8:29:24	root	0755
systemd-ac-power	11.875 KB	June 29 2023 8:29:24	root	0755
systemd-backlight	24.742 KB	June 29 2023 8:29:23	root	0755
systemd-binfmt	16.695 KB	June 29 2023 8:29:23	root	0755
systemd-cgroups-agent	12.008 KB	June 29 2023 8:29:23	root	0755
systemd-coredump	61.172 KB	June 29 2023 8:29:24	root	0755
systemd-cryptsetup	28.742 KB	June 29 2023 8:29:23	root	0755
systemd-dissect	16.016 KB	June 29 2023 8:29:23	root	0755
systemd-export	41.18 KB	June 29 2023 8:29:23	root	0755
systemd-fsck	24.734 KB	June 29 2023 8:29:23	root	0755
systemd-growfs	20.43 KB	June 29 2023 8:29:23	root	0755
systemd-hibernate-resume	12.008 KB	June 29 2023 8:29:23	root	0755
systemd-hostnamed	28.914 KB	June 29 2023 8:29:23	root	0755
systemd-import	49.164 KB	June 29 2023 8:29:23	root	0755
systemd-importd	37.047 KB	June 29 2023 8:29:23	root	0755
systemd-initctl	20.43 KB	June 29 2023 8:29:23	root	0755
systemd-journald	154.406 KB	June 29 2023 8:29:24	root	0755
systemd-localed	49.172 KB	June 29 2023 8:29:23	root	0755
systemd-logind	261.305 KB	June 29 2023 8:29:23	root	0755
systemd-machined	126.555 KB	June 29 2023 8:29:24	root	0755
systemd-makefs	12.414 KB	June 29 2023 8:29:23	root	0755
systemd-modules-load	20.422 KB	June 29 2023 8:29:24	root	0755
systemd-portabled	89.898 KB	June 29 2023 8:29:23	root	0755
systemd-pstore	20.875 KB	June 29 2023 8:29:23	root	0755
systemd-pull	93.797 KB	June 29 2023 8:29:23	root	0755
systemd-quotacheck	12.289 KB	June 29 2023 8:29:23	root	0755
systemd-random-seed	16.008 KB	June 29 2023 8:29:23	root	0755
systemd-remount-fs	24.531 KB	June 29 2023 8:29:23	root	0755
systemd-reply-password	12 KB	June 29 2023 8:29:23	root	0755
systemd-resolved	448.695 KB	June 29 2023 8:29:23	root	0755
systemd-rfkill	24.742 KB	June 29 2023 8:29:23	root	0755
systemd-shutdown	61.195 KB	June 29 2023 8:29:23	root	0755
systemd-sleep	20.766 KB	June 29 2023 8:29:24	root	0755
systemd-socket-proxyd	24.563 KB	June 29 2023 8:29:24	root	0755
systemd-sulogin-shell	12.023 KB	June 29 2023 8:29:23	root	0755
systemd-sysctl	20.766 KB	June 29 2023 8:29:23	root	0755
systemd-sysv-install	45.164 KB	October 08 2021 2:47:09	root	0755
systemd-timedated	36.953 KB	June 29 2023 8:29:23	root	0755
systemd-udevd	408.547 KB	June 29 2023 8:29:23	root	0755
systemd-update-done	12.422 KB	June 29 2023 8:29:23	root	0755
systemd-update-utmp	16.008 KB	June 29 2023 8:29:23	root	0755
systemd-user-runtime-dir	245.109 KB	June 29 2023 8:29:24	root	0755
systemd-user-sessions	11.859 KB	June 29 2023 8:29:23	root	0755
systemd-vconsole-setup	20.461 KB	June 29 2023 8:29:23	root	0755
systemd-veritysetup	12.008 KB	June 29 2023 8:29:24	root	0755
systemd-volatile-root	12.008 KB	June 29 2023 8:29:23	root	0755

2017 © D7net \| D704T team